CVE-2026-45151
LowCVSS 2.9Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
In NanoMQ MQTT Broker version 0.24.8 and earlier, quic_stream_recv can dereference a null substream pointer when a substream is in reopen state. The code finishes the AIO with error but does not return before locking c->mtx, potentially leading to crashes or other issues.
Risk Assessment
The risk involves potential crash of the MQTT broker, which can disrupt communication in IoT systems and other applications using MQTT.
Recommendation
It is recommended to upgrade NanoMQ to the latest version that includes a fix for this issue.
Original NVD description (English source)
NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. In 0.24.8 and earlier, quic_stream_recv can dereference a null substream pointer when a substream is in reopen state. The code finishes the AIO with error but does not return before locking c->mtx.